openstack-ansible-security/doc/source/developer-notes/V-38579.rst

Ubuntu 14.04 sets the ownership on /boot/grub/grub.cfg to root by default. The Ansible task will ensure that the secure default is maintained.